{% extends "base.html" %}

{% set active_page = "index" %}

{% block title %}HAProxy • Configuration{% endblock %}

{% block breadcrumb %}
<nav aria-label="breadcrumb" class="mb-3">
    <ol class="breadcrumb mb-0">
        <li class="breadcrumb-item"><a href="{{ url_for('main.index') }}"><i class="bi bi-house"></i></a></li>
        <li class="breadcrumb-item active" aria-current="page">Add Configuration</li>
    </ol>
</nav>
{% endblock %}


{% block content %}

<div class="row mb-4">
    <div class="col-md-3">
        <div class="card text-center shadow-sm">
            <div class="card-body">
                <h5 class="card-title text-primary">{{ frontend_count|default(0) }}</h5>
                <p class="card-text"><i class="bi bi-diagram-2"></i> Frontends</p>
            </div>
        </div>
    </div>
    <div class="col-md-3">
        <div class="card text-center shadow-sm">
            <div class="card-body">
                <h5 class="card-title text-success">{{ backend_count|default(0) }}</h5>
                <p class="card-text"><i class="bi bi-hdd-rack"></i> Backends</p>
            </div>
        </div>
    </div>
    <div class="col-md-3">
        <div class="card text-center shadow-sm">
            <div class="card-body">
                <h5 class="card-title text-warning">{{ acl_count|default(0) }}</h5>
                <p class="card-text"><i class="bi bi-shield"></i> ACLs</p>
            </div>
        </div>
    </div>
    <div class="col-md-3">
        <div class="card text-center shadow-sm">
            <div class="card-body">
                <h5 class="card-title text-info">L7: {{ layer7_count|default(0) }} / L4: {{ layer4_count|default(0) }}</h5>
                <p class="card-text"><i class="bi bi-layers"></i> Layers</p>
            </div>
        </div>
    </div>
</div>

{% if message %}
<div class="alert alert-{{ message_type|default('info') }} alert-dismissible fade show" role="alert">
    <i class="bi bi-{% if message_type == 'success' %}check-circle{% elif message_type == 'danger' %}exclamation-circle{% else %}info-circle{% endif %} me-2"></i>
    {{ message }}
    <button type="button" class="btn-close" data-bs-dismiss="alert" aria-label="Close"></button>
</div>
{% endif %}

<form method="post" class="needs-validation">
    <div class="card shadow-sm mb-4">
        <div class="card-header bg-primary text-white">
            <h5 class="mb-0"><i class="bi bi-plus-circle me-2"></i>Add New Configuration</h5>
        </div>
        <div class="card-body">
            
            <!-- FRONTEND SECTION -->
            <h6 class="text-primary mb-3"><i class="bi bi-hdd-network me-2"></i>Frontend</h6>
            
            <div class="row g-3 mb-3">
                <div class="col-md-4">
                    <label for="frontend_name" class="form-label">Frontend Name</label>
                    <input type="text" class="form-control" id="frontend_name" name="frontend_name" 
                           placeholder="e.g. fe_web" required>
                </div>
                <div class="col-md-4">
                    <label for="frontend_ip" class="form-label">IP Address (bind)</label>
                    <input type="text" class="form-control" id="frontend_ip" name="frontend_ip" 
                           placeholder="0.0.0.0" value="0.0.0.0" required>
                </div>
                <div class="col-md-4">
                    <label for="frontend_port" class="form-label">Port</label>
                    <input type="number" class="form-control" id="frontend_port" name="frontend_port" 
                           placeholder="443" value="443" min="1" max="65535" required>
                </div>
            </div>
            
            <div class="row g-3 mb-3">
                <div class="col-md-12">
                    <label for="frontend_hostname" class="form-label">Frontend Hostname (Domain)</label>
                    <input type="text" class="form-control" id="frontend_hostname" name="frontend_hostname" 
                           placeholder="e.g. host.domain.com" required>
                    <div class="form-text">Domain name for the ACL rule - traffic will be matched by Host header</div>
                </div>
            </div>

            <div class="row g-3 mb-3">
                <div class="col-md-6">
                    <label for="protocol" class="form-label">Protocol</label>
                    <select class="form-select" id="protocol" name="protocol" required>
                        <option value="http">HTTP</option>
                        <option value="tcp">TCP</option>
                    </select>
                </div>
                <div class="col-md-6">
                    <label for="lb_method" class="form-label">Load Balancing Method</label>
                    <select class="form-select" id="lb_method" name="lb_method" required>
                        <option value="roundrobin">Round Robin</option>
                        <option value="leastconn">Least Connections</option>
                        <option value="source">Source IP Hash</option>
                        <option value="uri">URI Hash</option>
                        <option value="static-rr">Static Round Robin (WRR)</option>
                        <option value="no-lb">No Load Balancing (single host)</option>
                    </select>
                    <div class="form-text">Choose load balancing algorithm or simple single host</div>
                </div>
            </div>

            <!-- SSL Section -->
            <div class="row g-3 mb-3">
                <div class="col-md-12">
                    <div class="form-check form-switch">
                        <input class="form-check-input" type="checkbox" id="ssl_checkbox" name="ssl_checkbox">
                        <label class="form-check-label" for="ssl_checkbox">
                            <i class="bi bi-lock me-1"></i>Use SSL (HTTPS)
                        </label>
                    </div>
                </div>
            </div>

            <div class="row g-3 mb-3 d-none" id="ssl_fields">
                <div class="col-md-12">
                    <label for="ssl_cert_path" class="form-label">SSL Certificate Path</label>
                    <input type="text" class="form-control" id="ssl_cert_path" name="ssl_cert_path" 
                           value="/app/ssl/haproxy-configurator.pem">
                    <div class="form-text">Full path to .pem file, upload certs in /ssl/</div>
                </div>
                <div class="col-md-12">
                    <div class="form-check">
                        <input class="form-check-input" type="checkbox" id="ssl_redirect_checkbox" 
                               name="ssl_redirect_checkbox">
                        <label class="form-check-label" for="ssl_redirect_checkbox">
                            Redirect HTTP to HTTPS
                        </label>
                    </div>
                </div>
            </div>

            <!-- Backend SSL Redirect -->
            <div class="row g-3 mb-3">
                <div class="col-md-12">
                    <div class="form-check">
                        <input class="form-check-input" type="checkbox" id="backend_ssl_redirect" 
                               name="backend_ssl_redirect">
                        <label class="form-check-label" for="backend_ssl_redirect">
                            <i class="bi bi-arrow-repeat me-1"></i>Add HTTP Redirect to HTTPS
                        </label>
                        <div class="form-text small">Creates additional frontend on port 80 to redirect HTTP to HTTPS backend</div>
                    </div>
                </div>
            </div>

            <div class="row g-3 mb-3 d-none" id="backend_ssl_fields">
                <div class="col-md-12">
                    <label for="ssl_redirect_backend_name" class="form-label">Redirect Backend Name (HTTP → HTTPS)</label>
                    <input type="text" class="form-control" id="ssl_redirect_backend_name" 
                           name="ssl_redirect_backend_name" placeholder="e.g. be_redirect">
                    <div class="form-text">Name for the redirect backend that will push traffic to HTTPS</div>
                </div>
            </div>

            <hr class="my-4">

            <!-- BACKEND SECTION -->
            <h6 class="text-primary mb-3"><i class="bi bi-hdd-rack me-2"></i>Backend</h6>

            <div class="row g-3 mb-3">
                <div class="col-md-12">
                    <label for="backend_name" class="form-label">Backend Name</label>
                    <input type="text" class="form-control" id="backend_name" name="backend_name" 
                           placeholder="e.g. be_web" required>
                </div>
            </div>

            <!-- Backend servers -->
            <div class="mb-3">
                <label class="form-label">Backend Servers</label>
                <div id="backend_servers_container">
                    <div class="row g-3 backend-server-row">
                        <div class="col-md-3">
                            <input type="text" class="form-control" name="backend_server_names[]" 
                                   placeholder="server1" value="server1" required>
                        </div>
                        <div class="col-md-4">
                            <input type="text" class="form-control" name="backend_server_ips[]" 
                                   placeholder="192.168.1.10" required>
                        </div>
                        <div class="col-md-2">
                            <input type="number" class="form-control" name="backend_server_ports[]" 
                                   placeholder="80" min="1" max="65535" required>
                        </div>
                        <div class="col-md-2">
                            <input type="number" class="form-control" name="backend_server_maxconns[]" 
                                   placeholder="100">
                        </div>
                        <div class="col-md-1">
                            <button type="button" class="btn btn-danger btn-sm w-100 remove-server" style="visibility: hidden;">
                                <i class="bi bi-trash"></i>
                            </button>
                        </div>
                    </div>
                </div>
                <button type="button" class="btn btn-secondary btn-sm mt-2" id="add_backend_btn">
                    <i class="bi bi-plus-lg me-1"></i>Add Server
                </button>
            </div>

            <!-- Health Check -->
            <div class="row g-3 mb-3 http-only">
                <div class="col-md-12">
                    <div class="form-check">
                        <input class="form-check-input" type="checkbox" id="health_check" name="health_check">
                        <label class="form-check-label" for="health_check">
                            <i class="bi bi-heart-pulse me-1"></i>Enable Health Check
                        </label>
                    </div>
                </div>
                <div class="col-md-12 d-none" id="health_check_fields">
                    <label for="health_check_link" class="form-label">Health Check Path</label>
                    <input type="text" class="form-control" id="health_check_link" name="health_check_link" 
                           value="/" placeholder="/">
                </div>
            </div>

            <div class="row g-3 mb-3" style="display: none;" id="tcp_health_check">
                <div class="col-md-12">
                    <div class="form-check">
                        <input class="form-check-input" type="checkbox" id="health_check2" name="health_check2">
                        <label class="form-check-label" for="health_check2">
                            <i class="bi bi-heart-pulse me-1"></i>Enable TCP Health Check
                        </label>
                    </div>
                </div>
            </div>

            <!-- Sticky Session -->
            <div class="row g-3 mb-3">
                <div class="col-md-12">
                    <div class="form-check">
                        <input class="form-check-input" type="checkbox" id="sticky_session" name="sticky_session">
                        <label class="form-check-label" for="sticky_session">
                            <i class="bi bi-pin-angle me-1"></i>Sticky Session
                        </label>
                    </div>
                </div>
                <div class="col-md-12 d-none" id="sticky_fields">
                    <select class="form-select" id="sticky_session_type" name="sticky_session_type">
                        <option value="cookie">Cookie-based</option>
                        <option value="source">Source IP-based</option>
                    </select>
                </div>
            </div>

            <hr class="my-4">

            <!-- HEADERS & SECURITY SECTION -->
            <h6 class="text-primary mb-3"><i class="bi bi-shield-lock me-2"></i>Headers & Security</h6>

            <!-- Custom Headers -->
            <div class="row g-3 mb-3">
                <div class="col-md-12">
                    <div class="form-check">
                        <input class="form-check-input" type="checkbox" id="add_header" name="add_header">
                        <label class="form-check-label" for="add_header">
                            <i class="bi bi-tag me-1"></i>Add Custom Header
                        </label>
                    </div>
                </div>
                <div class="col-md-6 d-none" id="header_fields">
                    <input type="text" class="form-control" id="header_name" name="header_name" 
                           placeholder="e.g. X-Custom-Header">
                </div>
                <div class="col-md-6 d-none" id="header_fields">
                    <input type="text" class="form-control" id="header_value" name="header_value" 
                           placeholder="e.g. custom-value">
                </div>
            </div>

            <!-- Server Header Removal -->
            <div class="row g-3 mb-3 http-only">
                <div class="col-md-12">
                    <div class="form-check">
                        <input class="form-check-input" type="checkbox" id="del_server_header" 
                               name="del_server_header">
                        <label class="form-check-label" for="del_server_header">
                            <i class="bi bi-shield-lock me-1"></i>Hide Server Header
                        </label>
                        <div class="form-text small">
                            Adds: <code>http-response del-header Server</code> (security)
                        </div>
                    </div>
                </div>
            </div>

            <!-- Forward For -->
            <div class="row g-3 mb-3 http-only">
                <div class="col-md-12">
                    <div class="form-check">
                        <input class="form-check-input" type="checkbox" id="forward_for_check" 
                               name="forward_for_check" checked>
                        <label class="form-check-label" for="forward_for_check">
                            <i class="bi bi-arrow-right me-1"></i>Forward For (X-Forwarded-For)
                        </label>
                    </div>
                </div>
            </div>

            <hr class="my-4">

            <!-- PROTECTION SECTION -->
            <h6 class="text-primary mb-3"><i class="bi bi-bug me-2"></i>Protection</h6>

            <!-- DOS Protection -->
            <div class="row g-3 mb-3 http-only">
                <div class="col-md-12">
                    <div class="form-check">
                        <input class="form-check-input" type="checkbox" id="add_dos" name="add_dos">
                        <label class="form-check-label" for="add_dos">
                            <i class="bi bi-exclamation-triangle me-1"></i>DOS/DDoS Protection
                        </label>
                    </div>
                </div>
                <div class="col-md-6 d-none" id="dos_fields">
                    <label for="ban_duration" class="form-label">Ban Duration</label>
                    <input type="text" class="form-control" id="ban_duration" name="ban_duration" 
                           value="30m" placeholder="30m">
                    <div class="form-text">e.g. 30m, 1h, 24h</div>
                </div>
                <div class="col-md-6 d-none" id="dos_fields">
                    <label for="limit_requests" class="form-label">Request Limit (per min)</label>
                    <input type="number" class="form-control" id="limit_requests" name="limit_requests" 
                           value="100" min="1">
                </div>
            </div>

            <!-- SQL Injection -->
            <div class="row g-3 mb-3 http-only">
                <div class="col-md-12">
                    <div class="form-check">
                        <input class="form-check-input" type="checkbox" id="sql_injection_check" 
                               name="sql_injection_check">
                        <label class="form-check-label" for="sql_injection_check">
                            <i class="bi bi-database-exclamation me-1"></i>SQL Injection Protection
                        </label>
                    </div>
                </div>
            </div>

            <!-- XSS -->
            <div class="row g-3 mb-3 http-only">
                <div class="col-md-12">
                    <div class="form-check">
                        <input class="form-check-input" type="checkbox" id="xss_check" name="xss_check">
                        <label class="form-check-label" for="xss_check">
                            <i class="bi bi-code-slash me-1"></i>XSS Protection
                        </label>
                    </div>
                </div>
            </div>

            <!-- Remote Uploads -->
            <div class="row g-3 mb-3 http-only">
                <div class="col-md-12">
                    <div class="form-check">
                        <input class="form-check-input" type="checkbox" id="remote_uploads_check" 
                               name="remote_uploads_check">
                        <label class="form-check-label" for="remote_uploads_check">
                            <i class="bi bi-cloud-upload me-1"></i>Block Remote Uploads
                        </label>
                    </div>
                </div>
            </div>

            <!-- Webshells -->
            <div class="row g-3 mb-3 http-only">
                <div class="col-md-12">
                    <div class="form-check">
                        <input class="form-check-input" type="checkbox" id="webshells_check" 
                               name="webshells_check">
                        <label class="form-check-label" for="webshells_check">
                            <i class="bi bi-shield-exclamation me-1"></i>Block Webshells
                        </label>
                    </div>
                </div>
            </div>

            <hr class="my-4">

            <!-- CUSTOM ACL SECTION (NEW) -->
            <h6 class="text-primary mb-3"><i class="bi bi-shuffle me-2"></i>Custom ACL Rules (Advanced)</h6>

            <div class="row g-3 mb-3 http-only">
                <div class="col-md-12">
                    <div class="form-check">
                        <input class="form-check-input" type="checkbox" id="add_custom_acl" name="add_custom_acl">
                        <label class="form-check-label" for="add_custom_acl">
                            <i class="bi bi-sliders me-1"></i>Add Custom ACL Rule
                        </label>
                        <div class="form-text small">Create additional routing or blocking rules beyond hostname matching</div>
                    </div>
                </div>
            </div>

            <!-- Custom ACL Fields (Hidden by default) -->
            <div class="row g-3 mb-3 http-only d-none" id="custom_acl_fields">
                <div class="col-md-3">
                    <label for="custom_acl_name" class="form-label">ACL Name</label>
                    <input type="text" class="form-control" id="custom_acl_name" name="custom_acl_name" 
                           placeholder="e.g. is_admin_path">
                    <div class="form-text small">Unique identifier for this rule</div>
                </div>

                <div class="col-md-3">
                    <label for="custom_acl_type" class="form-label">Rule Type</label>
                    <select class="form-select" id="custom_acl_type" name="custom_acl_type">
                        <option value="path_beg">Path Begins With</option>
                        <option value="path_end">Path Ends With</option>
                        <option value="path_sub">Path Contains</option>
                        <option value="hdr">Header Contains</option>
                        <option value="src">Source IP</option>
                        <option value="method">HTTP Method</option>
                    </select>
                </div>

                <div class="col-md-3">
                    <label for="custom_acl_value" class="form-label">Rule Value</label>
                    <input type="text" class="form-control" id="custom_acl_value" name="custom_acl_value" 
                           placeholder="e.g. /admin, api, 192.168.1.0/24, GET">
                    <div class="form-text small">Value to match (path, header name, IP, method)</div>
                </div>

                <div class="col-md-3">
                    <label for="custom_acl_action" class="form-label">Action</label>
                    <select class="form-select" id="custom_acl_action" name="custom_acl_action">
                        <option value="route">Route to Backend</option>
                        <option value="deny">Block (Deny)</option>
                        <option value="redirect">Redirect</option>
                    </select>
                </div>

                <div class="col-md-6 d-none" id="acl_backend_select">
                    <label for="custom_acl_backend" class="form-label">Target Backend</label>
                    <input type="text" class="form-control" id="custom_acl_backend" name="custom_acl_backend" 
                           placeholder="e.g. be_admin">
                    <div class="form-text small">Backend to send matching traffic to</div>
                </div>

                <div class="col-md-6 d-none" id="acl_redirect_select">
                    <label for="custom_acl_redirect_url" class="form-label">Redirect URL</label>
                    <input type="text" class="form-control" id="custom_acl_redirect_url" name="custom_acl_redirect_url" 
                           placeholder="e.g. https://example.com/new-path">
                    <div class="form-text small">URL to redirect matching requests to</div>
                </div>
            </div>

            <hr class="my-4">

            <!-- SUBMIT BUTTON -->
            <div class="d-grid gap-2">
                <button type="submit" class="btn btn-primary btn-lg">
                    <i class="bi bi-check-circle me-2"></i>Save Configuration
                </button>
            </div>

        </div>
    </div>
</form>

<script src="{{ url_for('static', filename='js/index.js') }}"></script>
<script src="{{ url_for('static', filename='js/form.js') }}"></script>

{% endblock %}